Collected research
MadeYouReset Technical Details - How (and Why) It Works?
MadeYouReset Technical Details
MadeYouReset makes an HTTP/2 server reset a stream itself, using primitives such as a zero-increment window update or a frame sent after the client closed the stream. The reset frees the concurrency slot at once while backend work continues, so an attacker beats the concurrent-stream limit and floods a server with unbounded in-flight requests.
Record
- Document
- MadeYouReset Technical Details
- Researcher
- Gal Bar Nahum
- Published by
- galbarnahum.com
- Topic
- Other
In the archive
Tags
This page is the archive's own catalogue record. The research is the work of Gal Bar Nahum, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on .